GTP RAT timeout profiles

You can use Radio Access Technology (RAT) timeout profiles to create GTP session timers for different RAT types. A RAT timeout profile can include one or more RAT type timeouts. A RAT timeout profile can be applied to a GTP profile and that GTP profile added to a firewall policy. Then, FortiOS Carrier will impose session timeouts for all GTP sessions according to their RAT type if a timeout for the RAT type has been added to the RAT timeout profile.

From the CLI, use the following command to add a RAT timeout profile to a GTP profile:

config firewall gtp

edit <name>

set rat-timeout-profile <rat-timeout-profile-name>

end

Use the following command to create a RAT timeout profile:

config gtp rat-timeout-profile

edit <rat-timeout-profile-name>

set utran-timeout <timeout>

set geran-timeout <timeout>

set wlan-timeout <timeout>

set gan-timeout <timeout>

set hspa-timeout <timeout>

set eutran-timeout <timeout>

set virtual-timeout <timeout>

set nbiot-timeout <timeout>

set ltem-timeout <timeout>

set nr-timeout <timeout>

end

For each of the following timeouts, the range is 0 to 4294967295 seconds. The default is 0, which means no timeout.

utran-timeout set the GTP session timer for a session with RAT-type = UTRAN.

geran-timeoutset the GTP session timer for a session with RAT-type = GERAN.

wlan-timeout set the GTP session timer for a session with RAT-type = WLAN.

gan-timeout set the GTP session timer for a session with RAT-type = GAN.

hspa-timeout set the GTP session timer for a session with RAT-type = HSPA.

eutran-timeout set the GTP session timer for a for a session with RAT-type = EUTRAN.

virtual-timeout set the GTP session timer for a session with RAT-type = Virtual.

nbiot-timeout set the GTP session timer for a session with RAT-type = NB-IOT.

ltem-timeout set the GTP session timer for a session with RAT-type = LTEM.

nr-timeout set the GTP session timer for a session with RAT-type = NR.

Example

The following example shows how to create two RAT type profiles and apply them to different GTP profiles.

Create two RAT type profiles (the timeouts shown in the examples are not recommended times):

config gtp rat-timeout-profile

edit "rat-iot-1"

set nbiot-timeout 60

set ltem-timeout 600

next

edit "rat-nr-1"

set nr-timeout 100

end

Then you can use the following option to add the RAT type profiles to GTP profiles.

config fireall gtp

edit GTP-protile-1

set rat-timeout-profile "rat-iot-1"

next

edit GTP-profile-2

set rat-timeout-profile "rat-nr-1"

end

When GTP-profile-1 is applied, a GTP session with RAT-type=NB-IOT will be released after 60 seconds. When GTP-profile-2 is used, a GTP session with RAT-type=NR will be released after 100 seconds.